Privacy Policy

This policy explains what personal data Intrinsic collects, why we collect it, how we protect it and what rights you have. Intrinsic is operated by Your Intrinsic LLC, a company registered in Sharjah Media City, UAE, trading as Intrinsic. Intrinsic stores sensitive financial information, so we collect as little as we can and keep it locked to your account.

• Account data: your email address, name (if you provide it) and authentication details. If you sign in with Google, we receive your basic profile and email from Google — never your Google password.
• Financial data you provide: accounts, holdings, transactions, dividends, watchlists, imported broker statements and settings.
• Brokerage connection data: if you link a broker, we store the connection identifiers and secrets needed to sync, plus the positions and activity returned. We never receive your broker login credentials.
• Subscription data: your plan status and the identifiers our payment provider gives us. Card numbers are handled entirely by the payment provider and never reach our systems.
• Technical and usage data: log and diagnostic data (such as request times and errors) and basic in-app usage events used to keep the Service working and improve it.

We do not ask for, and you should not enter, government ID numbers, full account numbers or other identifiers the app does not need.

• To provide the Service: storing your portfolio and calculating performance, dividends and valuations (performance of our contract with you).
• To fetch market data for the tickers you hold or watch (performance of our contract).
• To take payments and manage subscriptions (performance of our contract).
• To secure the Service, prevent abuse and debug problems (legitimate interests).
• To send essential service emails such as password resets and billing notices (contract / legitimate interests).
• To meet legal and accounting obligations (legal obligation).

We do not sell your personal data, and we do not use your portfolio data for advertising or share it with advertisers.

We share data only with processors that help us run the Service, under contract and only as needed:

• Base44 — application hosting, authentication and database.
• Paddle — payment processing and subscription billing.
• SnapTrade — optional brokerage account linking, if you choose to connect a broker.
• EOD Historical Data and CoinGecko — market data lookups (we send only ticker symbols, never your holdings).

We may also disclose data where required by law or to protect our rights, and to a successor in the event of a merger or acquisition.

• Data is encrypted in transit (HTTPS) and at rest by our hosting provider.
• Every record is scoped to the account that created it, enforced by row-level security on the database — other users cannot read your holdings, dividends or watchlists.
• API keys and brokerage secrets are stored as server-side secrets and are never exposed to the browser; calls to third-party providers are made from our backend only.
• File imports are accepted only from our own storage origins, and access to production data is limited to what is needed to operate the Service.
• No system is perfectly secure. Please use a strong, unique password and tell us immediately if you suspect your account has been compromised.

We keep your data for as long as your account is active. If you delete your account, we delete your portfolio data, holdings, transactions and dividend records, retaining only what we must for legal, tax or fraud-prevention purposes (for example billing records). Backups and logs age out on a rolling basis.

Depending on where you live, you may have the right to access, correct, export or delete your data, to object to or restrict processing, and to withdraw consent. You can edit or delete most of your data directly in the app, and you can contact us to exercise any of these rights or to complain to your local data protection authority.

Our providers may process data in countries other than yours, including the United States. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

We use only the storage needed to keep you signed in, remember preferences such as your theme, and measure basic product usage. We do not run third-party advertising trackers.

The Service is not intended for anyone under 18, and we do not knowingly collect their data.

We will post any updates to this policy here and notify you of material changes. For privacy questions or requests, contact us using the support details published on our website or in the app.